🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Novo Nordisk Breach Exposes Software Development Pipeline Risk
🔗 https://www.darkreading.com/cyber-risk/novo-nordisk-breach-exposes-dev-pipeline-risk

A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem.

Three Ways macOS 27 Improves iPhone Mirroring

In macOS 27 Golden Gate, Apple has brought some meaningful updates to iPhone Mirroring besides a new app icon. Here's what's new. macOS 27 is currently in developer beta, with a public beta coming next month and a gener…

https://www.macrumors.com/2026/06/18/three-ways-macos-27-improves-iphone-mirroring/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

🚨 EUVD-2026-38097

📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Branda – White Label & Branding, Free Login Page Customizer
🏢 Vendor: wpmudev
📅 Updated: 2026-06-19

📝 The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity p...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38097

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//gemincxologin[.]gitbook[.]io/us
🧬 Analysis at: https://urldna.io/scan/6a356f453b77500002ec4bf5
#cybersecurity #phishing #infosec #urldna #scam #infosec

🔴 CVE-2026-11551 - Critical (9.8)

The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This mak...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-11551/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-11551

🔴 CVE-2026-56081 - Critical (9.1)

Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on the pre-registered account...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56081/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56081

🟠 CVE-2026-56082 - High (7.5)

Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to the anon role and callable with only the public Supabase publishabl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56082/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56082

GentleKiller: The EDR-Killer Framework Built Into the Gentlemen RaaS https://deafnews.it/en/article/gentlekiller-the-edr-killer-framework-built-into-the-gentlemen-raas #Cybersecurity

iOS 27 Adds These New Features to Find My, Including 'Hide Location'

The upcoming iOS 27 update that Apple unveiled last week includes some new features and enhancements for Apple's Find My app on the iPhone. iOS 27 is currently available as a developer beta, with a public beta to follow…

https://www.macrumors.com/2026/06/18/ios-27-find-my-features-hide-location/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

🤖 Behold, the Swiss Army knife of cybersecurity! 🤯 Because who needs a simple code audit when you can have an AI-powered, acronym-infested, cloud-bloating monster that promises to find vulnerabilities AND last week's leftovers in your fridge! 🍕🔍
https://www.aikido.dev/blog/introducing-code-audit-find-complex-vulnerabilities-hidden-in-your-codebase #cybersecurity #AItools #innovation #techhumor #vulnerabilitydetection #cloudcomputing #HackerNews #ngated

Apple's A12 and A13 Chips Facing New Unpatchable Exploit

Security research firm Paradigm Shift today published details of a new BootROM vulnerability affecting Apple's A12 and A13 chips, along with a working proof-of-concept exploit named "usbliter8." The BootROM, or SecureRO…

https://www.macrumors.com/2026/06/18/a12-and-a13-chips-facing-exploit/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

Possible Phishing 🎣
on: ⚠️hxxp[:]//facebook-clone-rho-two[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a3583a53b7750000554cdf8
#cybersecurity #phishing #infosec #urldna #scam #infosec

You Can Watch All of F1's 2026 Austrian Grand Prix For Free on Apple TV

Apple today announced that every part of Formula 1's 2026 Austrian Grand Prix (June 26-28) will be streamed live on the Apple TV streaming service for free. This article, "You Can Watch All of F1's 2026 Austrian Grand P…

https://www.macrumors.com/2026/06/18/f1-2026-austrian-grand-prix-free-on-apple-tv/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #MacRumors [MacRumors]

New Release: #Tails 7.9

https://blog.torproject.org/new-release-tails-7_9/

#cybersecurity #anonymity #privacy #Tor #FOSS #Linux

#Apple fixes #Beats Studio Buds flaw that let hackers spy on conversations

https://www.bleepingcomputer.com/news/security/apple-fixes-beats-studio-buds-flaw-that-let-hackers-spy-on-conversations/

#cybersecurity #privacy

🚨 EUVD-2026-38067

📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: gonic
🏢 Vendor: sentriz
📅 Updated: 2026-06-19

📝 gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, the Subsonic API endpoints `/rest/deletePlaylist.view` and `/rest/getPlaylist.view` perform no per-resource authorization. Once authenticated as any ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38067

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38066

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Enterprise Traces (GET), Tempo
🏢 Vendor: Grafana
📅 Updated: 2026-06-19

📝 A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This could allow an authenticated user to trigger a denial ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38066

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38065

📊 Score: 6.3/10 (CVSS v3.1)
📅 Updated: 2026-06-19

📝 A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller stores the pull_request.statuses_url value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a Git...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38065

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-38064

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: urllib3/urllib3
🏢 Vendor: urllib3
📅 Updated: 2026-06-19

📝 urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when using Brotli support. The issue arises due to three independent code paths in `response.py` that bypass the `max_length` protection...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38064

#cybersecurity #infosec #euvd #cve #vulnerability

Gravity SMTP: 17M Attacks Exploit Info-Disclosure Bug https://deafnews.it/en/article/gravity-smtp-17m-attacks-exploit-info-disclosure-bug #Cybersecurity

Best USB charger deals 2026 – from tiny single-port smartphone chargers to large multi-port laptop chargers, we've found the best deals

From small smart devices to laptop charging, we dug up some of the best deals on 30W single-port to 100W multi-port chargers.

https://www.tomshardware.com/peripherals/usb/best-usb-charger-deals

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Urgent security alert: A critical unauthenticated RCE vulnerability (CVE-2026-20253) in Splunk Enterprise's PostgreSQL sidecar service is under active exploitation. CISA has mandated federal agencies patch by Sunday, June 21, 2026, highlighting the severe risk of data breaches, integrity compromise, and lateral movement for all organizations. Don't delay patching.

https://www.tpp.blog/i0tr7gu

#cybersecurity #cisa #splunkenterprise

🤖 This post was AI-generated.

#chrome extension Atlas Mens Chain Length G seems malicious. Its #cybersecurity badness score is 99/100!

```json
{"id": "keekjnolaokcibijmijjccpafcgagbdm", "score": 99, "platform": "chrome", "name": "Atlas Mens Chain Length G"}
```

#chrome extension Tube Fetch seems malicious. Its #cybersecurity badness score is 96/100!

```json
{"id": "ephgolildffkkeoaidgaokpjapjoiilg", "score": 96, "platform": "chrome", "name": "Tube Fetch"}
```

#chrome extension Gitlab Issue Timer seems malicious. Its #cybersecurity badness score is 97/100!

```json
{"id": "bfdfgeapdnmbniejglgknmocmenffngd", "score": 97, "platform": "chrome", "name": "Gitlab Issue Timer"}
```

Post-silicon era gets closer as industry giants crack the 2D transistor scaling bottleneck with breakthrough tech — imec, ASML, and TSMC fab complementary 2D-material transistors at 50nm pitch on …

Imec, ASML, and TSMC have integrated both n-type and p-type transistors with atomically thin 2D channels on a single 300mm wafer.

https://www.tomshardware.com/tech-industry/semiconductors/imec-asml-and-tsmc-build-complementary-2d-material-transistors-at-50nm-pitch-on-a-300mm-wafer

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

From a 7 KB file to a 13-year backdoor operation

https://anchor.host/from-a-7-kb-file-to-a-13-year-backdoor-operation/

#HackerNews #backdooroperation #cybersecurity #hacking #technews #malware

Possible Phishing 🎣
on: ⚠️hxxp[:]//netflix-clone-eight-alpha[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a3583ce3b7750000554ce3f
#cybersecurity #phishing #infosec #urldna #scam #infosec

Nothing cancels this year’s CMF phone due to RAM prices

Nothing's next budget phone is the latest victim of RAMageddon. As 9to5Google reports, Nothing co-founder Akis Evangelidis announced in a post on X that a follow-up to the CMF Phone 2 Pro won't be coming this year: We w…

https://www.theverge.com/gadgets/953066/nothing-cmf-phone-delayed-ram-prices

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

What has (can) the EU Cyber Resilience Act done (do) for you?
https://nxdomain.no/~peter/what_hascan_eu_cra_donedo_for_you.html
TL;DR: It's *not* the end of Free and Open Source software (or the world as we know it). It's time to engineer up!
#CRA #cyberresilience #resilience #cybersecurity #eu #freebsd #openbsd #netbsd #engineerup #development #softwareenginering

What has (can) the EU Cyber Resilience Act done (do) for you?
also at https://bsdly.blogspot.com/2026/06/what-has-can-eu-cyber-resilience-act.html (with trackers)
TL;DR: It's *not* the end of Free and Open Source software (or the world as we know it). It's time to engineer up!
#CRA #cyberresilience #resilience #cybersecurity #eu #freebsd #openbsd #netbsd #engineerup #development #softwareenginering

#chrome extension Roblox Play Button Color seems malicious. Its #cybersecurity badness score is 95/100!

```json
{"id": "okmnfbglccjhbkgmpdhpogaenhemegbn", "score": 95, "platform": "chrome", "name": "Roblox Play Button Color"}
```

#chrome extension Video Downloader Free Vid seems malicious. Its #cybersecurity badness score is 99/100!

```json
{"id": "nejbppbbepmcpjohaelhlidllpfailgg", "score": 99, "platform": "chrome", "name": "Video Downloader Free Vid"}
```

#chrome extension Luffy & Spiderman Epic Duo Live Wallpaper seems malicious. Its #cybersecurity badness score is 100/100!

```json
{"id": "momcknbmamjofcmgiinlopbgidneinej", "score": 100, "platform": "chrome", "name": "Luffy & Spiderman Epic Duo Live Wallpaper"}
```

The Ninja Creami just dropped to an all time low price for Prime Day - and I recommend one

Make your own ice cream, gelato, sorbet, and smoothie bowls with the Ninja Creami, now 22% off for Amazon Prime Day.

https://www.zdnet.com/article/ninja-creami-amazon-prime-day-2026-deal/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxp[:]//month-gasoline-seasoned[.]heyflow[.]site/at_t-mail-12260c
🧬 Analysis at: https://urldna.io/scan/6a34f7193b7750000554bd31
#cybersecurity #phishing #infosec #urldna #scam #infosec

Android 17 is messing up some Pixel phones’ touch input

Touchscreens are acting up on Android 17.

https://www.androidauthority.com/android-17-scrolling-bug-3679483/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

US energy regulator to order grid operators to expedite AI data center applications — says projects should br…

The FERC says that it will order grid operators to fast-track AI data center connections that generate their own power or reduce demand during peak hours. It demands that these changes must be enacted within 90 days.

https://www.tomshardware.com/tech-industry/data-centers/us-energy-regulator-to-order-grid-operators-to-expedite-ai-data-center-applications-says-projects-should-bring-their-own-power-or-cut-usage-during-high-demand

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//566772[.]com/index[.]html?userId=69f80b6a56a22aa03ff1&secret=9fd7eb3ff13763e6e59e893bbc5b11497c2e9d0226ea51a372fdb099f403c56a&expire=2026-05-04T03%3A58%3A50[.]380%2B00%3A00&project=69f80b69e26cdd750443
🧬 Analysis at: https://urldna.io/scan/6a34e91e3b775000067d096d
#cybersecurity #phishing #infosec #urldna #scam #infosec

CVE-2026-9142 - Critical RCE in Ni grpc-device. Insecure default credentials allow unauthenticated network access. CVSS 9.1. Update immediately. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-9142/